johm/freeskool — comment on commit 44aab014f08be0e40ec283a6fbaf1048e49e92af
File: app/models/course.rb line 3
By johm:

I wanted to allow user-generated html, but never be vulnerable to xss as a consequence. Seems like a hassle to do this in a view (and slow because you need to parse the html). I guess the best way to think about it might be like a validation, except it's cleaning the input on before_save rather than complaining.